Welcome to The Sustainable Place’s privacy policy

1. Important information and who we are

Purpose of this privacy policy

This privacy notice aims to give you information how we look after your Personal Data when you visit the website – www.thesustainableplace.org (the Website) and tell you about your privacy rights and how the law protects you.
Prior to using the Website, please read this privacy policy together with any other policy we may provide when we are collecting or processing your Personal Data, so that you are aware of how and why we use data. Note that the Website is not intended for children and we do not knowingly collect data of children.

Definition
In this privacy notice: the following capitalised terms are defined as below:

Personal Data means any information about an individual from which that person can be identified. It excludes anonymous data where the identity has been removed or redacted.
Legitimate Interest means your Personal Data is used by us in a way that is necessary for us to conduct and manage our business and provide you the best possible services and experiences. We would, however, not use your Personal Data in a way that our interests are overridden by the negative impact of using your Personal Data on you without your prior consent, unless it is otherwise required or permitted by law.

Controller
The Sustainable Place is the controller and responsible for your Personal Data. In this privacy policy, it may be called "we", "us" or "our" in this privacy policy.

We update our privacy policy from time to time to ensure it is in compliant with the latest law/regulation and aligns with our legitimate interests. Any change to our privacy policy will be posted on this page and, where appropriate, notified to you by email. Please visit this page frequently to see any updates or changes to our privacy policy.

It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us.

If we need to collect Personal Data to be able to fulfil our contract with you and you fail to provide that data when requested, we may have to cancel your membership by notifying you in advance.

External Sites and Application
This Website may, from time to time, contain links to third-party websites, plug-ins and applications. Accessing or enabling any of those links/connection may allow third parties to collect or share data about you. They may have their own privacy policies and we do not have any control over how your data will be used. We are not responsible or liable for it, so we recommend you to read their privacy policy of every external website you visit.

2. What Personal Data We Collect from You

Every time you visit the Website or book our events, we may collect, use, store and transfer the following group of Personal Data from you:

Identity Data - first name, last name, username or similar identifier, marital status, title, date of birth and gender
Contact Data - billing address, delivery address, email address and telephone numbers
Financial Data - bank account details
Transaction Data - details about payments to and from you and other details of events you have booked from us
Technical Data - IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Website
Profile Data - your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses
Usage Data - Information about how you use our website, products and services
Marketing and Communications Data - your preferences in receiving marketing from us and our third parties and your communication preferences

We, however, do not collect any Personal Data relating your gender, health, criminal records, ethnicity or religious beliefs, sexual orientation, political opinions, trade union membership or any information about your genetic and biometric data etc.

3. How We Collect your Personal Data

We use different methods to collect data from and about you including but not limited to through the following:

Direct interactions Account creation, contact us through phone or email, newsletter subscription and participation in a competition or survey.
Automated technologies or interactions Cookies and other similar technologies to collect Technical Data
Third parties or publicly available sources Analytics search providers, payment providers and public registry

4. What we use your Personal Data for and the basis of it

We will only use Personal Data to protect our legitimate interests and ensure they are used in a way that is compliant with the relevant law.

Below table sets out the type of Personal Data we often use and the purpose and the legitimate/lawful basis of us using such data.

where it is needed in order to perform a contract between you and us (such as fulfilling your booking).
where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
where we need to comply with a legal or regulatory obligation.

Purposes for which we will use your Personal Data

We have set out below, in a list format, a description of all the ways we plan to use your Personal Data, and which of the legal bases and our legitimate interests (if appropriate) we rely on to do so.

The list above is not exhaustive list and sometimes we may need to use your data without your knowledge or consent in order to comply with the relevant applicable laws.

5. Advertisement and Marketing

Promotional offers from us
You may, from time to time, receive marketing communications from us for promotional offer or invitation to participate in any competition, survey and/or rating review.

You can always update your marketing preferences to select what type of marketing materials and the frequency of it you receive or opt out of it completely by contacting us or doing it via your online portal at any time.

Kindly note that any update made to your marketing preferences, including unsubscribing any of the marketing materials completely, will not apply to Personal Data provided to us as a result of you using the Website, as we will require to use those data to further our legitimate interests, including performing our legal and contractual obligations.

Third-party marketing
We will not share your Personal Data with any other company or business for marketing purposes unless you have given express permission to do so.

Cookies
We may obtain information about your computer, including general internet usage, by placing cookies on your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve the platform and to deliver a better and more personalised service. For example, cookies can help us speed up your searches and store information about your preferences, so that it allows us to customise our platform according to your individual preferences.

You may at any stage set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, some parts of the Website may become inaccessible or not function properly. By continuing to use the Website without adjusting your browser setting to block or refuse cookies, you are consenting to using cookies on the Website.

6. Disclosures of your Personal Data
As per the purpose set out in paragraph 4, We may have to share your Personal Data with various external parties who may be acting as processors or joint controllers, such as IT services providers, professional advisers or third parties used for ID verification and fraud prevention, to safeguard our legitimate interests.

We require all third-party service providers to put in appropriate security measures to safeguard your Personal Data and only permit to use the data for specified purposes and in accordance with the relevant applicable laws.

7. Data security
We have implemented security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We restrict access to your Personal Data to those who need to access that data for legitimate purposes and in accordance with our instruction. We require all our third-party services providers, contractors or other third parties to be subject to the duty of confidentiality.

We also have procedures in place to deal with any suspected or actual data breach and will inform you and any applicable regulator of any such breach where we are legally required to do so.

8. Data retention
We will only retain your Personal Data for as long as necessary to fulfil our legitimate purpose. Note that by law, we are legally required to keep basic information (including contact information and identity) about our customers for six years after they cease being customers for tax purposes.

Note that we may in certain circumstances anonymise your Personal Data, so that we can use the information permanently for research or statistical purposes.

9. Rights and Compliant
We are committed to protect to your Personal Data and only use it in a way to safeguard our legitimate interests as permitted by the law. Under certain circumstances, you have the right to request:

access to your Personal Data we hold about you
erasure of your Personal Data we hold about you
correction of your Personal Data we hold about you
restriction of collecting or processing of your Personal Data
transfer of your Personal Data to you or to a third party.
withdrawal of your consent given to us to process your Personal Data

If you wish to exercise any of the rights set out above, please contact us but note that this may impact on the services that we provide to you. We may need to ask for specific information from you to help us confirm your identity and ensure your right to exercise any of those rights.
You will not have to pay a fee to exercise any of the other rights). However, if your request is clearly unfounded, repetitive or excessive. We may refuse your request

If you have any concerns or question about the way we use your data, please feel free to let us know any time and our dedicated data protection team will respond to address your concerns/questions. You are also entitled to make a complaint any time to the Information Commissioner's Office (ICO), the UK supervisory authority, for data protection issues (www.ico.org.uk) if needed.